my-vault/.claude/settings.local.json

{
  "permissions": {
    "allow": [
      "WebSearch",
      "Bash(gitleaks detect:*)",
      "WebFetch(domain:every.to)"
    ],
    "deny": [],
    "ask": []
  }
}